Get more help

Threat behavior

Installation

TrojanSpy:Win32/Ursnif can be disguised as an Adobe Flash update and thus unintentionally installed by a user. It is known to be the file downloaded via a link in a politically-themed email that is currently circulating.